Oval Definition:oval:org.opensuse.security:def:66833
Revision Date:2021-06-17Version:1
Title:Security update for xstream (Important)
Description:

This update for xstream fixes the following issues:

Upgrade to 1.4.17

- CVE-2021-29505: Fixed potential code execution when unmarshalling with XStream instances using an uninitialized security framework (bsc#1186651)
Family:unixClass:patch
Status:Reference(s):1186651
CVE-2013-2186
CVE-2014-0050
CVE-2016-1238
CVE-2017-15705
CVE-2018-11780
CVE-2018-11781
CVE-2018-11805
CVE-2020-1930
CVE-2020-1931
CVE-2021-29505
Platform(s):SUSE Linux Enterprise Module for Development Tools 15 SP2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Web Scripting 15 SP2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed
  • AND perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed
  • AND apache-commons-fileupload-1.4-1 is installed
    • BACK